Rocky Linux 8.10 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (ciqsa-2026_0595)

The Rocky Linux 8.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260595 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ FIPS 8.10 Compliant. It addresses 7 CVEs: CVE-2024-53150, CVE-2024-41090,...

Rocky Linux 9.6 [TuxCare] Security Update: nbdkit / nbdkit-bash-completion / nbdkit-basic-filters / etc (ALMALINUX9.6:CLSA-2026:1777021155)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1777021155 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Rocky Linux 9 [CIQ] Security Update: libvirt / libvirt-client / libvirt-client-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_2560)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20242560 advisory. The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition,...

Rocky Linux 9.2 [CIQ] Security Update: procps-ng / procps-ng-debuginfo / procps-ng-debugsource / etc (ciqsa-2026_0480)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260480 advisory. This advisory aggregates security fixes for the procps-ng SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2023-4016. Tenable has extracted the preceding description...

Rocky Linux 8 [CIQ] Security Update: perl-XML-Parser / perl-XML-Parser-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_7681)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20267681 advisory. perl-xml-parser: XML::Parser: Memory corruption via deeply nested XML files CVE-2006-10003 perl-xml-parser: XML::Parser for Perl: Heap corruption and denia...

Rocky Linux 8 [CIQ] Security Update: nginx / nginx-all-modules / nginx-debuginfo / nginx-debugsource / etc Multiple Vulnerabilities (crlsa-2019_2799)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20192799 advisory. HTTP/2: large amount of data request leads to denial of service CVE-2019-9511 HTTP/2: flood using PRIORITY frames resulting in excessive resource consumpti...

Rocky Linux 10.0 [CIQ] Security Update: expat / expat-debuginfo / expat-debugsource / expat-devel (crlsa-2025_19403)

The Rocky Linux 10.0 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202519403 advisory. expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing CVE-2025-59375 Tenable...

Rocky Linux 8 [CIQ] Security Update: httpd / httpd-debuginfo / httpd-debugsource / httpd-devel / etc (crlsa-2022_5163)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20225163 advisory. httpd: modproxy NULL pointer dereference CVE-2020-13950 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

Rocky Linux 9.2 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource Multiple Vulnerabilities (ciqsa-2026_0412)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260412 advisory. This advisory aggregates security fixes for the firefox SRPM in CIQ LTS 9.2. It addresses 68 CVEs: CVE-2024-3857, CVE-2024-3859, CVE-2024-3864,...

Rocky Linux 8 [CIQ] Security Update: apcu-panel / libzip / libzip-debuginfo / libzip-debugsource / etc Multiple Vulnerabilities (crlsa-2026_2470)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20262470 advisory. php: Leak partial content of the heap through heap buffer over-read in mysqlnd CVE-2024-8929 php: Single byte overread with convert.quoted-printable-decode...

Rocky Linux 9.6 [TuxCare] Security Update: python3.11 / python3.11-debug / python3.11-devel / python3.11-idle / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1774525255)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1774525255 advisory. - The imaplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation...

Rocky Linux 10.2 [CIQ] Security Update: aspnetcore-runtime-10.0 / aspnetcore-runtime-dbg-10.0 / etc Multiple Vulnerabilities (crlsa-2026_41897)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202641897 advisory. dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM CVE-2026-50651 dotnet: .NET Core: Denial of Service via type...

Rocky Linux 9 [CIQ] Security Update: libssh / libssh-config / libssh-debuginfo / libssh-debugsource / etc Multiple Vulnerabilities (crlsa-2024_2504)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20242504 advisory. libssh: ProxyCommand/ProxyJump features allow injection of malicious code through hostname CVE-2023-6004 libssh: Missing checks for return values for diges...

Rocky Linux 9.6 [TuxCare] Security Update: shim-x64 Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2025:1751552694)

The Rocky Linux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1751552694 advisory. - There's a possible overflow in handleimage when shim tries to load and execute crafted EFI executables; The handleimage function...

Rocky Linux 8.6 [CIQ] Security Update: libjpeg-turbo / libjpeg-turbo-debuginfo / libjpeg-turbo-debugsource / etc (ciqsa-2026_0078)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260078 advisory. This advisory aggregates security fixes for the libjpeg-turbo SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2020-13790. Tenable has extracted the preceding...

Rocky Linux 8.6 [CIQ] Security Update: systemd / systemd-container / systemd-container-debuginfo / etc (ciqsa-2026_0266)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260266 advisory. This advisory aggregates security fixes for the systemd SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2022-3821. Tenable has extracted the preceding description...

Rocky Linux 9.6 [TuxCare] Security Update: dnsmasq / dnsmasq-utils Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1779437548)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779437548 advisory. - dnsmasqs extractname function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache...

Rocky Linux 9 [CIQ] Security Update: freetype / freetype-debuginfo / freetype-debugsource / etc (crlsa-2025_3407)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20253407 advisory. freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files CVE-2025-27363 Tenable has extracted the...

Rocky Linux 10.2 [CIQ] Security Update: gstreamer1-plugins-base / gstreamer1-plugins-base-debuginfo / etc (crlsa-2026_66460)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202666460 advisory. gstreamer1-plugins-base: gstreamer: NULL/invalid-pointer dereference in gstrtspmessageparseauthcredentials when parsing a crafted Digest...

Rocky Linux 8.6 [CIQ] Security Update: crun Multiple Vulnerabilities (ciqsa-2026_1307)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261307 advisory. This advisory aggregates security fixes for the crun SRPM in CIQ LTS 8.6. It addresses 5 CVEs: CVE-2025-52881, CVE-2025-6032, CVE-2025-9566,...